Exploit for moveit-payload-decrypt

kitploit · 2026-09-02

Description

MOVEit deserialization vulnerability CVE-2023-34362 decrypts serialized payload from logs.

Entry point

ParameterArg06 · request body

Pathguestaccess.aspx

SQL injection payloads used via guest access flow in MOVEit Transfer module

Affected software

Progress Moveit Cloud< 14.0.5.45, 14.1.6.97, 15.0.2.39

Progress Moveit Transfer< 2021.0.7, 2021.1.5, 2022.0.5, 2022.1.6, 2023.0.2

All known vulnerabilities by product

Moveit Transfer

CVSS 9.8 for CVE-2023-34362

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-09-02 00:54

Last Seen:2026-09-03 02:07

Reporter:KitPloit

Tags

MOVEitdeserializationpayload decryptionCVE-2023-34362base64 artifactsshell script

Other exploits for CVE-2023-34362

2026-09-04 KitPloitKITPLOIT

MOVEit-Transfer-Data-Breach-Analysis.

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

MOVEit_CVE-2023-34362_IOCs

2026-09-04 KitPloitKITPLOIT

MOVEit-CVE-2023-34362

2026-09-04 KitPloitKITPLOIT

MOVEit-CVE-2023-34362

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

MoveIT-CVE-2023-34362-RCE

2026-09-04 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-TOORANDOM-MOVEIT-PAYLOAD-DECRYPT-CVE-2023-34362
# moveit-payload-decrypt-CVE-2023-34362

Этот shell-скрипт, получив OrgKey 0, разбирает заголовок base64-артефактов, найденных в журналах MOVEit, и расшифровывает сериализованный объект, использованный в качестве полезной нагрузки.